Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/1-SmGqFytLtjZvpy-JuyHYfLvooQ.roa
File: 1-SmGqFytLtjZvpy-JuyHYfLvooQ.roa (raw, json)
Hash identifier: tWvv7d13Hco6DN/eVd+/ceBW9iEecFwLC9vlIolf8z4=
Subject key identifier: F9:29:86:A8:5C:AD:2E:D8:D9:BE:9C:BE:26:EC:87:61:F2:EF:A2:84
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 06426C2D
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/1-SmGqFytLtjZvpy-JuyHYfLvooQ.roa
Signing time: Tue 15 Mar 2022 23:29:54 +0000
ROA not before: Tue 15 Mar 2022 23:29:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62298
IP address blocks: 91.205.40.0/24 maxlen: 32
2a01:5340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105016365 (0x6426c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Mar 15 23:29:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f92986a85cad2ed8d9be9cbe26ec8761f2efa284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:1c:fd:68:5b:bc:ed:01:9e:38:78:99:b7:
e0:ef:ec:cf:7a:72:82:0c:de:15:e7:66:37:85:cc:
09:2f:40:e6:bb:15:05:09:26:82:e2:32:c8:28:67:
a2:48:a8:c9:88:35:cb:24:52:61:3d:de:6a:85:52:
c0:a2:73:90:20:76:26:b0:85:2a:5e:ae:be:1c:6c:
34:dc:ef:bc:87:25:1e:29:d7:e3:0d:9c:ea:cd:ae:
ad:d1:db:96:19:fd:d4:e8:c8:12:c9:f3:25:83:12:
a0:49:8e:5b:2d:04:8c:5d:8b:93:04:98:5b:35:a4:
6e:d0:3c:d1:9d:8c:4a:46:43:26:9e:2b:7c:8c:e0:
6d:94:88:a3:70:a3:ee:b0:d5:74:bf:35:f8:fd:4f:
4f:16:7f:b7:32:2a:fd:01:3c:06:c8:c0:81:60:93:
c3:f0:4b:f2:ce:86:62:20:48:1c:41:4b:80:7c:36:
4f:8b:ef:e4:6f:7d:9a:1a:39:c3:d5:c1:4a:44:01:
94:86:5e:4f:12:07:f6:8f:a0:fa:38:10:6d:f1:24:
a2:50:81:66:1f:07:77:f9:84:31:bc:59:1d:2e:6e:
28:bc:a9:09:e1:ff:d9:ec:2f:c0:fa:90:dd:ac:da:
a0:fb:22:72:59:bb:c2:0e:80:fd:f5:e9:62:ff:9e:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:86:A8:5C:AD:2E:D8:D9:BE:9C:BE:26:EC:87:61:F2:EF:A2:84
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/1-SmGqFytLtjZvpy-JuyHYfLvooQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.40.0/24
IPv6:
2a01:5340::/29
Signature Algorithm: sha256WithRSAEncryption
5d:ab:76:69:d2:8c:c7:7d:6a:06:1e:f1:52:bb:cc:46:a8:2e:
3a:4e:54:8e:f9:48:8f:2d:64:ce:b1:a8:02:31:41:33:19:0d:
33:55:80:33:ee:4d:bc:bb:cd:a1:bb:1a:1a:77:43:dd:02:84:
11:42:f6:14:ca:24:9a:fb:06:be:24:00:49:d7:e2:64:69:3b:
1b:f7:ad:28:58:3d:1e:b6:2c:df:0e:ee:bc:2b:4d:8c:a2:74:
00:33:2e:b3:b6:54:84:89:94:eb:55:d6:44:a8:da:ae:5f:3b:
64:9d:e4:ea:f2:7e:31:80:d9:a4:0c:96:7a:f3:23:d7:1b:42:
7b:3a:a9:9e:de:7e:bf:90:ae:09:e6:15:8d:6d:bb:5a:10:11:
dd:e6:d5:3c:5e:51:50:0f:7c:49:29:09:da:a3:72:a8:9d:bd:
12:b3:8f:c3:9e:dc:21:6e:92:5e:d2:a3:8e:f8:55:3f:25:4c:
ac:0a:ae:ae:9f:22:80:15:d8:57:7b:a8:f8:e7:d4:6b:e5:3d:
00:af:21:e7:df:97:40:d5:4f:bd:8e:14:2d:c0:1b:0a:18:b1:
d1:51:a6:5c:a7:7e:fc:a9:1b:06:af:69:c6:96:91:e9:6e:70:
ee:9c:29:0e:0b:32:15:2a:5d:bf:6a:6a:65:39:c6:40:44:1d:
40:f8:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:07 2024 by rpki-client on console-ams.rpki-client.org